public key for source signature